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Concepts of audit and assurance KBF 
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• An audit is an evaluation of an organisation, system or 
process. Audits are performed to ascertain the validity and 
reliability of information , and also provide an assessment 
of a system’s internal control. 

• External audit is an “independent examination and 
expression of opinion on the financial statements of an 

entity” . 

• The purpose of external audit is to obtain sufficient 
appropriate audit evidence on which to base the audit 
opinion. 
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1.1 What is assurance? 
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“An engagement in which a practitioner express a 
conclusion designed to enhance degree of confidence 
of the intended users other than the responsible 
party about the outcome of the evaluation or 
measurement of a subject matter against criteria ” 


(International Audit and Assurance Standards Board 
Handbook) 
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1.1 What is assurance? 
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> Five elements 

• A three party relationship between: 

- the Practitioner 

- the responsible party 

- the intended users 

• A subject matter 

• Suitable criteria 


Sufficient appropriate evidence 

A written report 
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The elements of audit engagement KBF 


Company 



Shareholders 


User 


Financial _ 

statements 

Independent 
examination 
Auditor 


Directors 


Preparer 


Practitioner 
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1.2 Level of assurance 
provided by audit and review 
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> Limited level of assurance 

(i) Presented in a negative way 

(ii) “nothing has come to our attention”.. .that the subject 
matter is not free from material misstatement. 


> Reasonable level of assurance 

(i) A positive opinion 

(ii) The subject matter conforms in all material respects 
with the identified criteria 

(iii) E.g. statutory audit: give a true and fair view 
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1.2 Level of assurance provided \^SF 


by audit and review 

EKItS 

Reasonable Assurance 
(Audit) 

Limited Assurance 
(Review) 

Sufficient appropriate 
evidence to draw 
reasonable conclusion 

Sufficient appropriate 
evidence to draw limited 
conclusion 

Confirms in all material 
respects 

Is plausible in the 
circumstances 

Positively words opinion 

Negatively words opinion 

High level 

Moderate or lower level 

Evidence: TOC & SP 

Evidence: Enquiry & AP 
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Positive & Negative words opinion 

> " In our opinion the financial statements give a true 
and fair view of the financial position and 
performance of the company as at 31 December 2009. " 


> " Nothing has come to our attention that causes us to 
believe that the financial statements as of 31 December 
2009 are not prepared, in all material respects, in 
accordance with an applicable financial reporting 
framework:" 

[June 2012 exam Q 1(d) ] 
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Absolute assurance 
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> Absolute assurance would be the certification 
that something is absolutely correct. 


> This level of assurance cannot be given on an 
assurance engagement, due to the inherent 
limitations of the engagement 


Expectation Gap 
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Act as an external auditor 
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As a person : 

• Member of a recognised supervisory 
body(RSB) , e.g. ACCA; 

• Allowed by the rules of that body to be an 
auditor; 

• Someone directly authorised by the state ; 

As a firm: 

• Controlled by members of suitably authorised 

supervisory body 

• A firm directly authorised by the state ; 
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Not act as an external auditor 
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• Excluded by law 

> Who manage or work for the company being 
audited ; 

> Who have business or personal connections 
with the company. 


• Excluded by the code of ethics (discuss in 
later chapter) 
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2.1 Regulatory environment 
about external audit 
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• Most companies (except small or dormant 
companies) are required to have an external 
audit by law , which are referred to as “statutory 
audits”, asgfmt 

• Statutory audits have to be carried out in 
accordance with the legal req u irements of the 
country in which they are taking place. 
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2.2 Appointment, rights, removal 
and resignation of auditors 



m m w & 


2.2.1 Appointment 

• Auditors are appointed by the shareholders in 
general meetings. 

• Before Acceptance 

(i) Independence (connected with Threats) 

(ii) Resources 

(iii) Risks 

(iv) Conflicts of interests 
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2.2 Appointment, rights, removal |<BF 
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and resignation of auditors 

2.2.1 Appointment 
> Before Acceptance 

• Auditors should: 

(i) Ask client for permission to contact outgoing 
audito r 

(ii) If denied, reject the audit 

(iii) Ask outgoing auditor if any “relevant matters” 

(iv) Outgoing auditor should ask for permission to 
reply 

(v) If denied, the new auditor should be informed of 
this denial. 
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2.2 Appointment, rights, removal \(sp 
and resignation of auditors " w ’ * 

Once appointed (after acceptance) 

2.2.2 Rights 

• access to the company’s books and records 

• to receive all information and explanations 
necessary for the audit 

• to receive notice of and attend any general meeting 
for members of the company 

• to be heard at such meetings 

• to receive copies of any written resolutions of the 
company 

• Other rights relating to removal and resignation 


CREATING GREAT OUTCOMES 









2.2 Appointment, rights, removal and 
resignation of auditors 
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2 . 2.3 Removal 

• The auditor can only be removed by shareholders 
at a General Meeting with a majority vote . 

• The auditor must produce a “statement of 
circumstances”. If there are no circumstances that 
need attention, then a statement of no 
circumstances is required. 

• If the auditors have been removed before the end of 
their term, they must notify ACCA. 
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2.2 Appointment, rights, removal and 
resignation of auditors 
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2 . 2.4 Resignation 

• Resign in writing 

• In all cases, a “statement of circumstances” is 
required, even if it says there are no 

circumstances that need to be reported. 

• Connected with Removal rights 
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2.3 The Limitations 
audits 


of external 


• Financial information includes subjective and 
judgmental matters i AS i6ppe 
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• Inherent limitations of controls used as audit evidence 


• Representations from management may have to be 
relied upon as the only source of evidence in some 
areas 

• Evidence is persuasive not conclusive 

• Do not review 100% of the transactions 

• Materiality 
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Expectation Gap 
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They Believe 

Actually 

Auditors test all transactions and 
balances 

On sample basis 

Detect all fraud 

Reasonable assurance that FS 
are free from material 
misstatement, which may be 
caused by fraud 

Auditor are responsible for 
preparing the FS 

The responsibility of management 
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OT case Test 
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> Your firm has been approached to perform the external audit 
of Perth Co. As this is the first year the company has required 
an audit, the directors are unsure about the purpose of the 
audit, the level of assurance provided and the benefits of 
having an audit. 

1. Auditors aim to give absolute assurance over the accuracy of 
the Financial Statements. True or False? 

A True B False 

2. Which of the following is not one of the five elements of an 
assurance engagement? 

A Subject matter B Suitable criteria 

C Assurance file D Written report 
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OT case Test KBF 

«RHS 

3. Which of the following is NOT a benefit of an audit? 

A Increased credibility of the financial statements 

B Deficiencies in controls may be identified during testing 
C Fraud may be detected during the audit 
D Sampling is used 

4. Which of the following statements is false? 

A The auditor will express an opinion as to whether the 
financial statements show a true and fair view 

B The audit opinion will provide reasonable assurance 

C If the financial statements are found to contain material 
misstatements a negative audit opinion will be given 

D An audit may not detect all fraud and error in the financial 
statements 
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2.5 Relationship between 
ISA and national standards 
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• ISAs do not have legal status and they 
represent best practice in auditing. 

• If there is a conflict between ISAs and local audit 
requirement, the specific country regulation 
should be followed. 
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OT Case 

Which of the following statement is false? 
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A. Auditing standards are laws which must be followed 
during all audits; 

B. Audi t ing s t andards should be followed during all audi ts 

unless there are exceptional circumstances which would 

mean the audit objective would not be met; 

C. Auditing standards are professional regulations; 

D. Auditing standards may be different in different countries, 
even those using ISAs 
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OT Case 
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Which of the following are reasons for the audit profession 
issuing auditing standards? 


I. To ensure consistency of audits across different firms; 

II. To provide bureaucracy for auditors; 

III. To ensure quality in the standard of audit performed; 

A. All of them 

B. (i) and (ii) only 

C. (i) and (iii) only 

D. (ii) and (iii) only 
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OT Case 
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Which of the following people may act as auditor for a 
company? 


A. The company’s previous finance director who left the 
company five years ago to join the audit firm 

B. A director of the company being audited who holds a 
valid audit certificate 

C. An employee of t he company being aud ited who hold a 

valid audit certificate 

D. The wife of the finance director who works for a 
reputable audit firm 
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OT Case 
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Which of the following people may act as auditor for a 
company? 


A. The company’s previous finance director who left the 
company five years ago to join the audit firm 

B. A director of the company being audited who holds a 
valid audit certificate 

C. An employee of the company being audited who hold a 

valid audit certificate 

D. The wife of the finance director who works for a 
reputable audit firm 
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OT Case 
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In most jurisdictions, the auditors of the company will be 
appointed by which party? 


A. Directors 

B. Audit committee 

C. Government 

D. Shareholders 


CREATING GREAT OUTCOMES 






2 


OT Case 

Which of the following statements is true? 
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A. The shareholders of most company will also be the 
directors 

B. The directors are the stewards of the company 
responsible for looking after the company on behalf of 
the owners 

C. Directors will always have a vested interest in the 
company doing well because the own shares in the 
company the work for 

D. Auditor are allowed to be business partners of the 
company directors 
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Corporate governance 
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3.1 Corporate governance KBF 

Corporate governance refers to the way in which 

companies are operated and controlled . 

• The aim of this is to ensure that companies are 
run well in the interest of their shareholders, 
employees , and other key stakeholders . 

• This aim is to try and prevent company directors 
from abusing their power which may adversely 
affect these stakeholder groups. 
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3.1 Corporate governance KBF 

EDs + NEDs = Board 

(i) Executive directors(EDs) - are involved in 
the day-to-day running of the company 

(ii) Non-executive directors(NEDs) are 
independent, part-time directors who 
scrutinise the company’s affairs. 

(iii) NEDs should, as far as possible be 
“independent” of the company(i.e. not former 
employees). 
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13.2 The UK Corporate Governance 

• Listed company in UK: UK Corporate governance code. (Best 
Practice) 

• UK CG Code: comply or explain 


Definition 


Principles 

Definition 

Leaderships 

Company should have a board as a brain; No-one 
should have unfetters powers of decision... 

Effectiveness 

balance of skills, independence in board; 
appointment of directors through transparent, formal, 
rigorous process... 

Accountability 

Risk-awareness in making decision; true assessment 
of company’s position and future 

Remuneration 

Formal and transparent procedures for policy for 
executive directors remuneration 

Relations with 
shareholders 

Dialogue, AGM 
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3.2.1 Leadership KBF 
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> Every company should be headed by an 

effective board. 

> Chairman should be separated from CEO. 
(Clear division of responsibilities) 

• No one have unfettered powers of decision 

> There should be a balance of EDs and NEDs. 
Ideally, at least half of the Board should be 

NEDs. 

> A “Nomination Committee” comprising NEDs 
ensures there is no bias in board appointments. 

> Re-elect directors periodically (annually or every 
3ys) 
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3.2.2 Effectiveness 
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> Appropriate balance of skills, experience, 
independence and knowledge 

> Directors should discharge responsibilities 
effectively 

> Information should be processed in a timely 
manner 

> All directors should update skills and knowledge 
regularly; (receive induction) 

> There should be a formal annual evaluation of its 
own performance 
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3.2.3 Accountability iSf* 1 " 

• The board should present a balanced and 
understandable assessment of the company’s 
position and prospects. 

• The board is responsible for assessing risks in 
achieving strategic objectives. 

• There should be an “Audit Committee” responsible 
for applying appropriate internal control principles 
and maintaining relationship with the company’s 
external auditors. 
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3.2.4 Director’s remuneration 
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• Formal and transparent procedure for 

developing policy on executive remuneration 

• A Remuneration Committee comprising NEDs 
should set remuneration levels for the 

board. (“attract and retain”) 

3.2.5 Relations with shareholders 

• The board should use the AGM to communicate 
with investors and to encourage their participation. 

• Dialogue with shareholders 


CREATING GREAT OUTCOMES 




KBF 


C 


Corporate governance 
in action 
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3.3 Audit committees 
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> Be made up of at least 3 NEDs 

> The “bridge” between the internal and external 
auditors and the main Board 

> Committee members should be independent of 
operational management 

• Responsibilities: 

o Internal audit respects 

S Reviewing systems of internal controls 

S Agreeing agenda of work for the internal audit 
department 

S Reviewing the results of internal audit work 
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3.3 Audit committees 
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• Responsibilities: 

o External audit respects 

^ Reviewing accounting policies and financial 
statements to ensure that they are appropriate 

s Reviewing the independence and competence of 
the external audit firm 

S Liaising with the external auditor if there are any 
queries/concerns 

□ The audit committee is considered to be more 

independent and can be more objective. 
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3.3 Audit committees 

Other functions: 
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^Monitoring he integrity of financial statements 

^Reviewing the company’s internal financial control 

^Reviewing arrangements for confidential reporting 
by employees and investigation of possible 
i m p ro p ri et i es (whis tieblowing) 
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The audit 
committee 







Composition 

Objectives 

Function 





C Minimum of ] f 

3 non-execs J l 


Increase public 
confidence 


C 


At least 1 with 
financial expertise 


C 

c 


Financial awareness 
of non-execs 


Liaison with 
external auditors 


3 C 


Financial 

statements 
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3 C 


Controls 


3 


3 C 


Internal audit 


3 




External 
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Whistleblowing 
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3.4 Advantages of an audit 
committee 
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> More time 

> Increased public confidence in the credibility and 
objectivity 

> A form of internal control 

> Financial reporting - one of the members should 
have “financial expertise” 

> Bring valuable skills, knowledge and expertise to 

the company 

> Easier and cheaper to arrange finance 

> Meet listing requirements 
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3.5 Limitations of an audit committee 
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• Finding suitable candidates 

• Diminished importance of the board 

• Slower decision-making 

• Cost 


CREATING GREAT OUTCOMES 






3.6 Internal control and 
risk management 
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3.6 Internal control and risk 
management 
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Part of internal control should include the 
assessment of its key business risks 

(i) Financial risks - affect the entity’s cash flow 

(ii) Compliance risks - relating to laws and 
regulations 

(iii) Operational risks - relating to the day-to-day 
operations of the business 
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3.6 Internal control and risk 
management 
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Director’s responsibility in respect of risk: 

• Implement internal control and monitor their 
application and effectiveness: 


Auditor’s responsibility in respect of risk: 

• Assess the effectiveness of controls for reducing the 
risk of material misstatements of financial statements 

• Incorporate this into overall audit risk assessment 
which allows them to design their further audit 
procedures 

• Report significant deficiencies in client controls and 
any significant risk identified 
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OT-case 
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Cocklebiddy Co, a listed company, is currently reviewing its 
corporate governance practices to ensure they are 
compliant with regulations. The following is a description of 
the corporate governance policies they have in place: 

• A remuneration committee comprise 3 NEDs; 

• An audit committee comprising the finance director and 
the chief executive and 2NEDs; 

• Separate people taking on the roles of chairman and 
chief executive 


CREATING GREAT OUTCOMES 





3 


OT-case 
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Which of the following best defines corporate governance? 

A. Corporate governance refers to the importance a 
company attaches to system and controls 

B. Corporate governance is the means by which a 
company is operated and controlled 

C. Corporate governance is the extent to which a company 
is audited, both internally and externally 

D. Corporate governance is an appraisal activity as a 
service to the entity. 
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OT-case 


KBF 

fitSMS 


In terms of the structure of the audit committee of 
cocklebiddy, which of the following actions should be taken 
to become compliant with corporate governance 
regulations? 

A. A minimum of one NED should be recruited 

B. A minimum of one NED should be recruited and the 
finance director should be removed 

C. A minimum of one NED should be recruited and the 
finance director and chief executive should be removed 

D. No action necessary 
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OT-case 
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Which TWO of the following are functions of audit committee? 

I. Planning the annual external audit 

II. Reviewing the effectiveness of internal financial controls 

III. Reviewing and monitoring the external auditor’s 
independence 

IV. Processing year-end journal adjustments to the financial 
statements 

A. i and iv 

B. i and iii 

C. ii and iv 

D. ii and iii 
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OT-case 
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Cocklebiddy Co does not currently have an internal audit 
function. Which of the following summarises the requirements 
of corporate governance regulations in respects of internal 
audit? 


A. The audit committee must review the need for an internal 
audit function on an annual basis 


B. The audit committee must establish an internal audit 
committee as soon as possible 


C. 

D. 


There must either be an audit committee or internal audit 
function in place but there is no requirement to have both 


The finance director must review the need for an internal 
audit function and should make a request to the audit 
committee if it decided that an internal audit function 
wou l d b e b e n e f i c i a l 
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Which of the following is the main purpose of the 

remuneration committee? 

A. To ensure that the costs of the company are kept under 
control 

B. To ensure no director is involved in setting his own pay 
and the pay that is set is at an appropriate level 

C. To ensure decision making power for the company is not 
concentrated in the hands of one individual 

D. To ensure executives are paid a large basic salary 
irrespective of performance 
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3.7 Need for auditors to communicate 
with those charged with governance 

ED NED shareholder 
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• Those charged with governance means the 
person(s) with responsibility for overseeing the: 

(i) Strategic direction of the entity 

(ii) Obligations relating to the accountability of the 
entity 


The main forms of formal communication: 

• The Engagement letter(beginning) 

• The Management letter(end) W9mm 
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3.7 Need for auditors to communicate 
with those charged with governance 
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Matters to be communicated: 


(i) Planned scope and timing of the audit 

(ii) Auditor’s responsibilities in relation to audit 

(iii) Auditor independence 
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3.7 Need for auditors to communicate 
with those charged with governance 
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(i) Significant findings from the audit, including: 


Changes in accounting policies, estimates and 
disclosures 

Any material risks and exposures 
Audit adjustments , [fiN < IS: ■ 

Material uncertainties 
Disagreements with management 
Expected modifications 
Material weaknesses in internal control 
Written representations requested 

management letter 


CREATING GREAT OUTCOMES 





5 


Internal audit 
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• Focus on the accounting and internal control 
systems-evaluate the effectiveness 

• To improve the management of the company and to 
help the company achieve its corporate objectives 

• Normally performed by employees of the entity, (report 
directly to the audit committee) 

• Staffed with qualified, experienced staff 

• Appointment and remuneration controlled by an audit 
committee 

- CREATING GREAT OUTCOMES 






5.1 Factors to consider when 
assessing the need for internal 
auditors 
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• It is considered to be best practice, Not legal 
requirement 


> The need for internal audit will depend on: 

S Scale, diversity and complexity of activities 

S Complexity of operations 

S Number of employees 

S Cost/benefit considerations 

s The desire of senior management to have 
assurance and advice on risk and control 
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5.2 Codes of corporate 
governance about internal audit 
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• The UK Corporate Governance Code does not 
require companies to have an internal audit 
department. 

• The Code requires the audit committee to 
consider annually whether one is needed. 

• The audit committee is responsible for 
monitoring and reviewing internal audit activities. 

• Internal auditors are not subject to the same 
qualification requirements as external auditors. 
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5.3 Internal audit VS External audiJCBF 
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External 

Internal 

Objective: 

Provide opinion 

Advise management 

Appointed by: 

Shareholders or directors 

Management or Audit 
committee 

Reports to: 

Shareholders 

Management or Audit 
committee 

Status: 

Independent 

Employee 

Legal basis 

Legal requirement 

Not a legal requirement 

Reports on& 
Responsibility 

The truth and fairness of the 
financial statements and their 
compliance with the Companies 
Act and Accounting Standards 

A wide range of issues 
including risk management 
and internal controls and 
corporate governance 

Scope 

Financial focus 

All areas of the organization 

Standards 

ISAs 

IIA, SOX, Combined code 

Approach 

Risk-- based 

Increasingly risk-based 
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Internal audit function 
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Key activities of the internal audit function: 

> Whether the company is demonstrating best practice in 
CG 

> Risk identification and management (Key risk areas) 

> Testing Effectiveness of internal controls 

> Assessing Reliability of financial and operating 
information (Accounting system) 

> Assessing Economy, efficiency and effectiveness of 
operating activities (Value for money) 

> Assessing compliance with laws and regulations 

> Prevention and detection of fraud 
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internal audit function 
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Discuss later 


Fraud investigation 
IT system review 
Mystery shopper visits 
Contract visits 
Asset verification 

Providing direct assistance to the external auditor 
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6.1 Limitations of internal audit 
function 


KBF 

m is w & 


• To form an objective independent opinion despite 
the fact that internal auditors are normally 

employees; (Internal offer: employed by the 
company) 

• Insufficient resources to form an effective IA 
function; (small organization) 

• Fear of possible repercussions 

IA may report to the audit committee to mitigate some 
of those problems 
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6.2 Outsourcing 
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• Outsourcing is the contracting-out of a business 
process to a third party. 


• Outsourcing internal audit can overcome some 
of the limitations caused by insufficient 
resources outlined above. 
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6.3 Advantages and 
disadvantages of outsourcing 
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> Advantages 

- cost and efficiency 

- broader range of expertise 

- may improve independence 

- costs of employing permanent staff are avoid 

> Disadvantages 

- conflict of interest if provided by the external auditor 

- pressure on the independence of the outsourced 
function ,i.e. fees 

- lack of knowledge of the business 

- the decision maybe based on the cost 

- flexibility and availability may not as high as in- house 
existing internal audit department 
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6.4 Internal audit assignments KBF 
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6.4.1 Value For Money (VFM) 


• A value for money audit is concerned with obtaining the 
best possible combination of services for the least 
resources. 

• Minimum cost 

• Cost of medical suppliers per 
annum 


/ in Inin EW B ttm % 


Economy 


/ 
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Efficiency 


• Outputs/inputs 

• Number of patients treated per 
year 



• Achievement of goals and 


Effectiveness 

targets 



• Recovery rates 
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6.4 Internal audit assignments 
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6.4.2 IT 

• Hardware, software, internet and the overall IT 
environment 

6.4.3 Financial 

• Review of management accounts and systems 

• Ensure the business is meeting its financial 
targets 

• Where external auditors are most likely to 
rely on internal auditors 
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6.4 Internal audit assignments KBF 

6.4.4 Regulatory compliance 

• Meeting key legal requirements or specific legal 
requirements relating to the industry 

6.4.5 Fraud investigations 

• To ensure a fraud is not taking place 

• Use lower materiality levels than external audit 

• Investigate suspected fraud at an entity 
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6.4 Internal audit assignments KBF 

6.4.6 Customer experience 

• Help the company to see itself from its 
customers’ point of view 

• To ensure it is meeting the customer needs 

• Obtain customer feedback and analyse 
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6.5 Operational internal audit 
assignment 
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An operational IA assignment simply reviews the 
operations of a business, and so gives management 
assurance on the effectiveness of operations. 

6.5.1 Procurement audit 


• Procurement (purchasing) involves obtaining goods 
and services from outside suppliers at the right price. 

• Key risks: 

(i) Pay to non-existent suppliers 

(ii) Inaccurate or late payments 

(iii) Not getting best price from suppliers 


CREATING GREAT OUTCOMES 





6 


6.6 Internal audit report 
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IA can produce a similar report to management of 
external auditors. 

Typical Report include: 

> Terms of reference: the requirements of the 
assignment 

> Executive summary: key risk and recommendation 

> Body of the report: a detailed description of the 
work performed and the results of that work 

> Appendix 
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You are an audit manager of Sat srima & C o and have been assigned to the audit of Tangerine Tech Co (Tangerine), a 
company which is planning to list on a stock exchange within six months. The listing rules of the stock exchange 
require compliance with corporate governance principles, and the directors are unsure whether they are following best 
practice in relation to this. They have asked the audit engagement partner for their view on this matter. 

Tangerine’s board is comprised of six executive directors , a non-executive chairman and th ree other non-executive 
directors (NEDs). The chairman and one of the NEDs are former executive directors of Tangerine and on reaching 
retirement age were asked to take on non-executive roles. The_cqmjDany has established an audit committee, and all 


NEDs are members including the chairman who chairs the committee. A NTour me mbers of the audit committee were 
previously^involy ed in saj es_or_pr oduction related roles. " ~ - 

A ll of the d imctorsJ^ave-b een members of the board for at least four years. As the c hairman does not have an executive 
role, he has sole responsibility for liaising with the sharehold ers and answering anv of their questions. The company 
has not established an internal audit function"to morTTtoFTnternal controls. 


{}'Qy\‘4ArO yjC 


Required: 

Using the information above: 




^Describe) FIVE corporate governance weaknesses f aced by Tangerine Tech Co and provide a recommendation to 


provide 


address each weakness to ensure compTTance with corporate governance principles. 

7 -—^ #4 y\s — 5 c*>d& 

^ —b c*- c ~i>vn ir$A feeJeattw ■■ ^ 

-- 
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(10 marks) 
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June 2011 exam Q4 (b) 
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Goofy Co's year end is 31 December, which is traditionally a busy time for NAB & Co. Goofy Co currently has an 
internal audit department of five employees but they have struggled to undertake the variety and extent of work 
required by the company, hence Goofy Co is considering whether to recruit to expand the department or to outsource 
the internal audit department. If outsourced, Goofy Co would require a team to undertake monthly visits to test 
controls at the various shops across the country, and to perform ad hoc operational reviews at shops and head office. 

Goofy Co is considering using NAB & Co to provide the internal audit services as well as remain as external auditors. 

Required: 

(b) Discuss the a dvanta ges and disadvantages to both Goofy Co and NAB & Co of outsourcing their internal audit 
department. ---- ~ ~ (10 marks) 
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